Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dc5cbc7-68fd-353b-b6b8-50ff4d81baa1.roa
File: 7dc5cbc7-68fd-353b-b6b8-50ff4d81baa1.roa (raw, json)
Hash identifier: g7RYyVZsmPJ+orlqasrgULSQ66BCgB+iuXNdUqh1sfk=
Subject key identifier: 52:13:81:46:3F:6A:DC:8C:A9:3F:0D:CF:2B:B8:D2:99:40:BC:73:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C151A9124F6E55F04D06DE8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dc5cbc7-68fd-353b-b6b8-50ff4d81baa1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.35.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:1a:91:24:f6:e5:5f:04:d0:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=24f0e13a-ee08-48f5-ad99-10ed71d86b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:4e:c2:47:f5:3c:d5:4c:00:26:6d:5e:de:
34:1f:02:d3:d4:21:08:bc:2f:61:28:e2:b5:92:18:
ee:62:f6:90:cc:18:1b:c8:13:15:ec:94:4a:ed:d8:
d0:be:8a:36:09:e4:c5:6c:de:6b:ab:de:96:32:29:
8d:15:e4:3e:f4:95:96:6d:f2:f6:6b:f0:5b:da:29:
55:6e:21:f1:82:fb:3b:3e:e3:2e:c8:4a:bd:40:9d:
39:c5:f0:b7:e5:c8:23:1e:03:b7:b8:dd:9d:11:b5:
ff:21:73:76:c9:ba:e9:82:56:bf:e5:c4:dd:e4:5f:
08:d6:01:80:5e:d3:99:f6:13:ac:8e:76:5b:4a:93:
4d:9b:1d:0a:a8:0f:6e:f0:a8:eb:1a:09:54:29:1b:
65:28:78:55:5e:ce:a6:9c:06:1a:45:54:e4:46:62:
ac:b3:3c:ea:02:5c:84:54:e4:44:d3:2e:22:2f:0c:
7f:4e:3f:08:13:cc:89:4f:c7:c1:3a:60:b2:68:75:
9f:43:45:46:f2:d1:97:93:b5:56:3f:3a:a7:ab:86:
d0:91:d1:1d:fd:d8:28:ab:17:be:eb:67:a7:57:01:
fa:55:4e:55:b6:c0:8c:8b:52:04:f4:dc:5a:14:3c:
5c:12:bb:58:12:c6:46:7e:be:e9:aa:0c:82:f7:7b:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:81:46:3F:6A:DC:8C:A9:3F:0D:CF:2B:B8:D2:99:40:BC:73:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dc5cbc7-68fd-353b-b6b8-50ff4d81baa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.35.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:cc:2e:2f:89:e8:44:42:37:c9:1a:87:19:d4:d7:0a:47:2f:
41:35:0c:8f:0d:e7:2d:07:9b:be:b5:05:f0:55:9c:9d:d6:04:
9e:2a:d9:30:09:68:db:8d:e8:73:45:5a:ce:5e:4a:50:5e:3e:
b6:b4:90:ed:ab:e7:9d:bc:a5:7a:a6:ee:89:14:b0:2a:b6:36:
4c:9f:a5:b8:7d:6f:32:8c:10:61:37:f3:d2:f3:81:42:8c:6f:
1d:b0:32:42:87:77:0b:49:42:9a:be:39:00:ae:65:5a:10:90:
b5:8d:b2:89:b5:e9:e0:b2:85:6b:e4:63:39:68:71:7e:75:25:
50:10:0c:16:65:6b:ac:f6:fd:2b:88:cd:f6:9e:fe:33:5a:cc:
37:c8:15:35:da:a3:2a:aa:02:cc:b4:57:77:e6:01:12:12:5b:
ae:a6:4b:53:3a:45:c5:45:30:6a:18:57:d4:5c:fd:35:2f:58:
f7:e4:22:ba:97:85:dc:70:82:1e:3b:f6:e5:f1:3e:c7:37:b8:
f7:0f:09:66:df:2f:d2:40:ba:5e:84:cc:43:8f:cd:ec:78:e0:
79:18:68:d0:85:02:f4:4b:da:12:9b:55:65:ab:a2:86:2e:57:
47:a9:1c:a7:1e:b8:7d:9c:bd:8a:d8:7e:c3:08:f9:13:1d:98:
e8:bd:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:04 2025 by rpki-client